This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft File: NIg6t5nxQCjltTdQbir4eESQQcU.mft (raw, json) Hash identifier: loyERQ4S31SRxJJKv2NH9ItwFnvpnQG60w//tsbEuBo= Subject key identifier: C0:E5:5D:91:CF:24:C1:8D:D3:ED:3C:E7:B8:9C:93:B4:B8:78:2E:40 Authority key identifier: 34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5 Certificate issuer: /CN=34883ab799f14028e5b537506e2af878449041c5 Certificate serial: 019AF31BC8E3C00B2951ABD7C7DA582A27D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft Manifest number: 0630 Signing time: Sat 06 Dec 2025 10:01:15 +0000 Manifest this update: Sat 06 Dec 2025 10:01:15 +0000 Manifest next update: Sun 07 Dec 2025 10:01:15 +0000 Files and hashes: 1: NIg6t5nxQCjltTdQbir4eESQQcU.crl (hash: ZLIYovRj02yGSGZJ6i3uB4LS1bqhaW0KUVj1iRqnd94=) 2: aOjf7ha4NpM1xf113RLoBKrWwUY.roa (hash: hUQXGx10+6VeL01cd/7kpuKBjZges7kH8YJzcunm/rU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:c8:e3:c0:0b:29:51:ab:d7:c7:da:58:2a:27:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34883ab799f14028e5b537506e2af878449041c5 Validity Not Before: Dec 6 10:01:15 2025 GMT Not After : Dec 7 10:01:15 2025 GMT Subject: CN=c0e55d91cf24c18dd3ed3ce7b89c93b4b8782e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:22:03:47:16:7d:ad:73:a1:8c:57:a0:8a:42: 77:99:65:fc:d4:64:19:87:f0:fa:6e:7d:fd:c7:9e: bf:67:bc:67:fa:49:83:9b:b9:5f:3a:cc:a4:5f:e4: 5a:4f:a1:71:a9:b1:3b:9c:e9:d6:e1:99:3d:d7:ca: d7:a6:f0:9b:6f:33:a1:c4:b9:eb:1c:67:64:cc:61: bc:df:1f:86:af:a8:d5:8c:d2:c9:c6:d6:fd:fa:66: f7:44:21:8c:08:53:0b:c8:b8:7a:67:a1:c3:28:d3: 14:25:f7:fd:03:5c:8b:c3:cc:41:8a:b5:2e:3b:12: e2:25:7c:95:40:2e:81:d5:fb:3d:90:41:0c:3b:31: e7:3f:8e:56:aa:1e:71:aa:0c:f7:07:ac:13:af:2e: 9e:10:3f:63:26:e3:b4:b9:27:10:2b:c9:20:2b:60: 46:24:ad:26:79:ff:e3:6a:b4:a7:19:ab:c9:8c:a2: 10:eb:c1:d7:fc:18:67:88:2a:39:5f:e9:15:06:f2: f8:6a:da:fb:fc:d2:f2:14:7b:1b:77:be:cd:6e:89: 95:70:89:7a:e9:b9:41:fa:a4:2b:14:4c:56:c2:c1: ab:4c:55:5b:09:8e:2d:a7:96:31:70:0e:c3:33:20: 8b:90:6d:a9:49:8e:63:a4:47:ec:e2:fa:e2:82:16: d2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E5:5D:91:CF:24:C1:8D:D3:ED:3C:E7:B8:9C:93:B4:B8:78:2E:40 X509v3 Authority Key Identifier: keyid:34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:89:57:c2:c9:7f:2f:f4:ae:ad:7b:b2:b2:08:33:d9:7b:df: 8a:66:96:91:51:e0:af:0a:a5:0f:e4:6e:6c:97:05:79:81:78: 28:26:7b:5f:56:eb:71:d6:38:b5:28:85:ec:b8:20:6b:b1:7f: ba:9a:20:b9:c0:de:82:72:90:81:6c:07:8b:92:bd:ad:ae:b4: 00:7d:04:4d:3b:06:3d:ba:e4:1e:16:27:15:9a:43:84:b1:d3: 4d:8a:e1:bd:d1:3e:49:04:bc:ac:8d:dd:50:76:ba:3b:df:07: ce:bd:b4:be:d2:46:ad:95:24:38:5e:df:40:89:2a:c8:10:23: 25:60:35:56:8f:4a:bc:8e:3c:3e:56:aa:83:be:e0:3e:72:73: 0c:f8:7e:61:48:be:f3:0e:3d:fa:68:cf:66:0b:a5:db:2b:f3: 36:eb:37:61:97:ef:3b:6d:4f:f1:a0:f6:84:32:fd:60:4f:4a: 54:3d:7b:da:89:9e:58:80:34:f0:a9:e8:8d:0f:f6:a5:00:6a: 60:a7:e4:07:b1:65:0d:b6:8f:ba:5d:a6:ad:d9:49:70:de:86: 93:76:ab:c2:b4:bc:24:86:4b:00:76:ae:d5:ef:87:7a:ab:5d: 63:db:f7:6d:a4:d5:d4:e8:1d:7f:97:54:cb:32:9b:47:28:15: 0b:0e:30:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG8jjwAspUavXx9pYKifSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ODgzYWI3OTlmMTQwMjhlNWI1Mzc1MDZlMmFmODc4NDQ5 MDQxYzUwHhcNMjUxMjA2MTAwMTE1WhcNMjUxMjA3MTAwMTE1WjAzMTEwLwYDVQQD EyhjMGU1NWQ5MWNmMjRjMThkZDNlZDNjZTdiODljOTNiNGI4NzgyZTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyIDRxZ9rXOhjFegikJ3mWX81GQZ h/D6bn39x56/Z7xn+kmDm7lfOsykX+RaT6FxqbE7nOnW4Zk918rXpvCbbzOhxLnr HGdkzGG83x+Gr6jVjNLJxtb9+mb3RCGMCFMLyLh6Z6HDKNMUJff9A1yLw8xBirUu OxLiJXyVQC6B1fs9kEEMOzHnP45Wqh5xqgz3B6wTry6eED9jJuO0uScQK8kgK2BG JK0mef/jarSnGavJjKIQ68HX/BhniCo5X+kVBvL4atr7/NLyFHsbd77NbomVcIl6 6blB+qQrFExWwsGrTFVbCY4tp5YxcA7DMyCLkG2pSY5jpEfs4vrighbSwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDlXZHPJMGN0+0857ick7S4eC5AMB8GA1UdIwQY MBaAFDSIOreZ8UAo5bU3UG4q+HhEkEHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTklnNnQ1bnhRQ2psdFRkUWJpcjRlRVNRUWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mNGRlMTEtNTIzOS00ZWM1LTgxZTYt MjY0OGZlOWNjMDIwLzEvTklnNnQ1bnhRQ2psdFRkUWJpcjRlRVNRUWNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mNGRlMTEtNTIzOS00ZWM1LTgxZTYtMjY0OGZlOWNjMDIw LzEvTklnNnQ1bnhRQ2psdFRkUWJpcjRlRVNRUWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaolXwsl/ L/SurXuysggz2XvfimaWkVHgrwqlD+RubJcFeYF4KCZ7X1brcdY4tSiF7Lgga7F/ upogucDegnKQgWwHi5K9ra60AH0ETTsGPbrkHhYnFZpDhLHTTYrhvdE+SQS8rI3d UHa6O98Hzr20vtJGrZUkOF7fQIkqyBAjJWA1Vo9KvI48Plaqg77gPnJzDPh+YUi+ 8w49+mjPZgul2yvzNus3YZfvO21P8aD2hDL9YE9KVD172omeWIA08KnojQ/2pQBq YKfkB7FlDbaPul2mrdlJcN6Gk3arwrS8JIZLAHau1e+HeqtdY9v3baTV1Ogdf5dU yzKbRygVCw4wkw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:01:15 2025 by rpki-client